Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.mft
File:                     sTFfExaKIog9oEuECAZgc7Hz8Nw.mft (raw, json)
Hash identifier:          6G9aM5hnJ0y9zglwh2Rb9aahaIEjveChkYbYXkYOn2c=
Subject key identifier:   17:36:26:49:D2:48:F6:E7:AA:2D:9F:15:AB:AB:8F:2E:41:79:25:80
Authority key identifier: B1:31:5F:13:16:8A:22:88:3D:A0:4B:84:08:06:60:73:B1:F3:F0:DC
Certificate issuer:       /CN=b1315f13168a22883da04b8408066073b1f3f0dc
Certificate serial:       0196BF6ED51FA942750B9F410028D206DD0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sTFfExaKIog9oEuECAZgc7Hz8Nw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.mft
Manifest number:          1532
Signing time:             Sun 11 May 2025 13:00:33 +0000
Manifest this update:     Sun 11 May 2025 13:00:33 +0000
Manifest next update:     Mon 12 May 2025 13:00:33 +0000
Files and hashes:         1: sTFfExaKIog9oEuECAZgc7Hz8Nw.crl (hash: EoocpjTGyBA1z/3JW7fLeYnoW8mE6tqJMCuQKE1AEDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sTFfExaKIog9oEuECAZgc7Hz8Nw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:6e:d5:1f:a9:42:75:0b:9f:41:00:28:d2:06:dd:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1315f13168a22883da04b8408066073b1f3f0dc
        Validity
            Not Before: May 11 13:00:33 2025 GMT
            Not After : May 12 13:00:33 2025 GMT
        Subject: CN=17362649d248f6e7aa2d9f15abab8f2e41792580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:34:24:43:df:9d:04:20:8f:40:49:e2:a2:b6:
                    b2:51:62:05:58:a4:b0:9b:98:dc:df:4b:af:98:4f:
                    a1:d4:78:2b:3d:99:1b:89:73:b8:5c:e4:53:36:18:
                    5e:22:30:fa:99:e3:2f:69:e5:39:07:77:d4:90:ee:
                    97:fb:63:a0:df:fe:43:cd:fb:3f:b3:59:d3:45:c5:
                    9b:0e:a4:cd:98:28:2f:87:69:2e:12:c9:79:bb:78:
                    53:b0:c2:b6:f0:18:86:14:81:65:a5:c7:b2:04:c6:
                    b3:84:7a:19:fd:df:03:22:d4:82:c9:59:88:89:b9:
                    27:b2:a1:32:2c:f5:3f:4b:10:ba:14:12:c6:d6:24:
                    b6:cf:69:49:dc:d0:81:a5:65:33:2c:66:81:ff:ea:
                    7a:30:45:ea:c5:9e:81:76:ec:16:cc:12:eb:35:5e:
                    a7:88:f7:44:05:bd:d2:cd:85:0c:47:98:5f:6a:e0:
                    5c:33:a5:53:ce:16:d1:8f:a6:7b:58:c9:da:11:ab:
                    3b:a1:f5:34:22:e0:0c:53:7f:59:29:ce:d3:68:e9:
                    7a:af:45:4d:93:15:84:20:77:25:a4:3e:36:8b:77:
                    16:a5:9c:e4:c8:ff:06:e7:b8:0f:3f:7a:f2:d8:cf:
                    df:8c:35:2b:b4:2e:63:6f:6d:73:57:b4:d4:fd:86:
                    7b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:36:26:49:D2:48:F6:E7:AA:2D:9F:15:AB:AB:8F:2E:41:79:25:80
            X509v3 Authority Key Identifier:
                keyid:B1:31:5F:13:16:8A:22:88:3D:A0:4B:84:08:06:60:73:B1:F3:F0:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTFfExaKIog9oEuECAZgc7Hz8Nw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:3e:da:41:00:d0:35:66:15:3d:61:ec:35:e8:f5:a4:23:c3:
         72:8b:df:09:b3:a4:b4:06:e3:4c:97:f2:d5:7d:e5:fa:cd:5b:
         62:b9:0f:50:02:41:5e:dc:fd:fc:4f:84:3b:7f:cc:4b:8d:8a:
         9e:12:2d:c6:04:41:9f:cf:2e:33:9d:8b:39:73:70:4e:29:69:
         a7:17:e8:70:df:83:5f:c4:2f:85:fe:2f:24:40:93:f9:c3:f6:
         b0:13:fa:b0:0d:56:61:7f:54:83:a2:99:8b:f3:35:33:d4:95:
         80:71:82:7d:b5:03:5b:ee:38:aa:7f:56:14:46:a9:af:d2:ec:
         72:03:72:5c:c9:60:fb:88:3e:b6:7f:c1:9d:ce:b2:41:20:44:
         c1:c0:f7:fd:37:1d:1e:76:3d:80:5d:e3:79:c4:f4:c9:7e:e3:
         d2:46:ed:15:5d:5c:12:f3:c1:48:40:8e:b8:3d:bb:84:fe:d7:
         f8:02:d3:b7:df:46:bb:86:99:96:4e:d5:27:26:52:75:7a:4b:
         fb:23:cb:c0:c4:b7:6c:f7:a1:d4:e1:a3:50:65:0e:b2:27:dd:
         8e:77:d8:c0:11:d5:40:d7:2c:63:6d:5b:15:7c:c5:6e:e7:f4:
         c5:c0:b0:1a:4e:8c:01:60:b8:59:f1:25:37:06:36:a7:20:98:
         99:c5:92:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:03:35 2025 by rpki-client